Sun Microsystems Netscape Enterprise Server, Руководство администратора

Страница: 338 / 532

Restricting Access to Your Web Site
338 Netscape Enterprise Server Administrator’s Guide
9.
Specify the access rights you want to include in the rule by clicking “all.”
Select the access rights in the bottom frame, and then click Update.
10.
Specify the programs you want to restrict. Programs are the forms in the
Server Manager for the server you selected. For example, you can restrict
access to all forms for configuring the administration server by checking the
“All Programs” radio button. If you want to restrict access to one or two sets
of forms, choose the categories in the drop-down list. If you want to restrict
access to one form in a category, type the name of the form in the “Program
Items” field. For example, to restrict access to the access control form, type
distacl
in the Program Items field. For more information, see “Access to
Programs” on page 344.
Click Update to add the programs options to the rules for the line you’re
editing.
11.
If you are familiar with ACL files, you can enter a customized ACL entry by
clicking X under the Extra column.
This area is useful if you use the access control API to customize ACLs.
12.
Select Continue if you want the access control rule to continue in a chain.
This means the next line is evaluated before the server determines if the
user is allowed access. When creating multiple lines in an access control
entry, it’s best to work from the most general restrictions to the most
specific ones.
13.
Repeat steps 5 through 11 for each rule you need.
If you want the user to be redirected to another URL if their request is
denied, check “Response when denied.” Click the link to specify the URL
for redirection.
14.
Click Submit to store the new access control rules in the ACL file.
If you click Revert, the server removes any changes you made to the rules
from the time you first opened the two-frame page. Be cautious when using
Revert because you can’t restore your edits. In most cases, it’s probably
better to delete the rule lines individually.